|
Posted by on July 3, 2007, 6:44 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I cannot for the life of me determine what port numbers refer to echo
and echo-reply.
I know they are related for ICMP and I believe one of them is 7, but
what is the other?
I am using a pix asa5520.
Any help would be greatly appreciated!
|
|
Posted by Sebastian G. on July 3, 2007, 6:47 pm
If you were Registered and logged in, you could reply and use other advanced thread options
toureg69@yahoo.com wrote:
> I cannot for the life of me determine what port numbers refer to echo
> and echo-reply.
>
> I know they are related for ICMP
and ICMP doesn't have any port numbers. It only has status codes.
> and I believe one of them is 7, but what is the other?
Well, why don't you simply look into RFC 792 or at Wikipedia, Google it up
or RTFM?
|
|
Posted by mak on July 4, 2007, 2:03 am
If you were Registered and logged in, you could reply and use other advanced thread options toureg69@yahoo.com wrote:
> I cannot for the life of me determine what port numbers refer to echo
> and echo-reply.
>
> I know they are related for ICMP and I believe one of them is 7, but
> what is the other?
>
> I am using a pix asa5520.
>
> Any help would be greatly appreciated!
>
play around with ping or traceroute and capture the packets,
then you'll see the different answer types.
...here a detailed description:
http://www.spirit.com/Resources/icmp.html
M
|
|
Posted by Ansgar -59cobalt- Wiechers on July 4, 2007, 7:35 am
If you were Registered and logged in, you could reply and use other advanced thread options toureg69@yahoo.com wrote:
> I cannot for the life of me determine what port numbers refer to echo
> and echo-reply.
That's no real surprise, since ICMP doesn't have ports.
> I know they are related for ICMP and I believe one of them is 7, but
> what is the other?
You believe wrong. ICMP is an IP protocol of its own that has nothing to
do with TCP or UDP.
http://en.wikipedia.org/wiki/Internet_Control_Message_Protocol
cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich
|
|
Posted by Moe Trin on July 4, 2007, 12:21 pm
If you were Registered and logged in, you could reply and use other advanced thread options On Tue, 03 Jul 2007, in the Usenet newsgroup comp.security.firewalls, in article
>I cannot for the life of me determine what port numbers refer to echo
>and echo-reply.
As others have posted - ICMP does not have ports. See RFC792 (or RFC0792)
at any search engine. ICMP Echo Request is a Type 8 Code 0, and the reply
will be a Type 0 Code 0.
0792 Internet Control Message Protocol. J. Postel. September 1981.
(Format: TXT=30404 bytes) (Obsoletes RFC0777) (Updated by RFC0950,
RFC4884) (Also STD0005) (Status: STANDARD)
See also http://www.iana.org/assignments/icmp-parameters
>I know they are related for ICMP and I believe one of them is 7, but
>what is the other?
http://www.iana.org/assignments/port-numbers
echo 7/tcp Echo
echo 7/udp Echo
Notice these are TCP and/or UDP, and not ICMP. This is a different service,
0862 Echo Protocol. J. Postel. May 1983. (Format: TXT=1237 bytes)
(Also STD0020) (Status: STANDARD)
but when microsoft invented IP networking 13 years after everyone else,
they didn't bother to implement this service - they have a habit of not
bothering to follow existing standards. This isn't a big deal, as this
service isn't required by RFC1122 (while the ICMP version _is_ required).
1122 Requirements for Internet Hosts - Communication Layers. R.
Braden, Ed.. October 1989. (Format: TXT=295992 bytes) (Updated by
RFC1349, RFC4379) (Also STD0003) (Status: STANDARD)
As only a few operating systems include the TCP and UDP Echo service, you
will rarely see packets for port 7 - mainly from skript kiddiez who haven't
learned how to read yet.
Old guy
|
| Similar Threads | Posted | | Multiple Source IP port numbers | October 26, 2005, 3:51 am |
| open port numbers behind the firewall | July 17, 2008, 3:20 pm |
| ICMP Type 8 Echo Request packet security concerns | October 11, 2005, 5:39 am |
| Re: [Q] Numbers ? | August 31, 2006, 5:16 pm |
| ICA error numbers and their meaning -- Where? | December 22, 2004, 11:42 pm |
| Internet Assigned Numbers Authority | May 6, 2005, 7:09 am |
| netscreen: not allowed to port forward port outside port < 1024 toone inside >= 1024? | December 15, 2004, 12:47 pm |
| Sunblade 100 Workstation serial port link to Cisco PIX appliance CONSOLE port. | January 26, 2005, 2:13 pm |
| Firewall port 1105 (FTRANHC) & port 1239 (NMSD) ? | January 6, 2006, 1:48 am |
| iptables port forwarding - port is filtered, needs to be open | March 11, 2005, 4:15 pm |
|